Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
File: T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json)
Hash identifier: mm5EsESmSiGdYOtj0uw3K7hAODLi97GYSCbqCxkx/5M=
Subject key identifier: 01:2A:3A:77:6F:BE:F4:2A:D4:95:B4:F8:E6:FF:08:D7:25:E9:C6:6B
Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
Certificate issuer: /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Certificate serial: 019A4FCFD7B850AB838A0E3B7CCB8BA4E61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
Manifest number: 066C
Signing time: Tue 04 Nov 2025 17:00:12 +0000
Manifest this update: Tue 04 Nov 2025 17:00:12 +0000
Manifest next update: Wed 05 Nov 2025 17:00:12 +0000
Files and hashes: 1: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: DmrBVem3V9pqR1yXtYdmD4HSle7yt5Tnj5FLHvLvyTw=)
2: aeScWSEVmNc0EYb-mhHt5BZ1Oe0.roa (hash: fc/BLsPdy7txjMA7q9xzQpymVU7f1xNFpkeDtKxEBLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d7:b8:50:ab:83:8a:0e:3b:7c:cb:8b:a4:e6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Validity
Not Before: Nov 4 17:00:12 2025 GMT
Not After : Nov 5 17:00:12 2025 GMT
Subject: CN=012a3a776fbef42ad495b4f8e6ff08d725e9c66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:35:ff:e7:d3:71:e2:6d:1e:0f:d7:f5:0e:
66:de:a7:58:76:82:ab:c5:de:c1:9b:54:32:70:63:
e4:41:b4:24:00:13:eb:81:4f:21:7e:c0:fc:9e:9c:
cb:19:1e:bf:cc:24:c8:a1:c9:84:13:84:9f:f0:97:
71:01:e2:5e:f7:23:6e:6b:3e:9d:f2:4f:cf:1f:22:
02:4e:f4:1b:d3:66:dd:b5:0c:60:df:b3:31:70:11:
95:40:6d:c7:fe:d9:1e:0b:db:de:d8:72:89:ca:3e:
a6:7a:47:ea:6b:f6:75:f3:8b:83:1c:df:10:d9:f5:
ce:41:89:e8:af:11:39:a4:fb:c0:71:a6:8e:a2:8d:
bc:d1:95:97:35:22:22:19:d0:17:cc:11:34:44:29:
87:c4:9e:01:55:e5:25:d7:1d:4d:f6:81:c8:64:fc:
85:08:c0:25:92:a3:96:c3:b3:44:e8:dc:89:89:23:
ef:53:0c:9f:64:b5:dd:43:4b:73:fc:93:69:34:72:
fb:23:a3:c4:c1:8b:b8:fa:0e:6e:48:90:7e:e7:79:
2a:2c:1b:bc:de:33:14:ed:53:7b:50:d4:8f:b2:f5:
fd:0b:76:16:64:18:ef:17:63:97:1a:7a:7a:1d:4f:
df:29:5b:f7:70:3f:20:5a:59:7a:b0:c5:5b:8e:14:
6d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2A:3A:77:6F:BE:F4:2A:D4:95:B4:F8:E6:FF:08:D7:25:E9:C6:6B
X509v3 Authority Key Identifier:
keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2c:da:20:e6:c6:ea:06:2a:b2:22:f7:65:84:33:f8:39:d4:
c8:fc:5a:d7:e1:98:86:cf:de:44:33:ac:08:62:2c:0d:21:16:
8f:5d:ac:f6:e1:c2:04:44:f9:ad:13:2f:65:9f:f5:65:da:25:
b8:07:28:f7:31:72:45:87:f9:81:06:4c:44:93:3f:dd:13:5f:
96:e4:c5:cc:3c:32:15:fb:8d:0f:2e:c4:e2:3c:b9:33:f2:c4:
3a:53:e1:ad:c9:f8:99:09:d3:17:5b:73:34:a4:2e:e6:d1:8e:
4d:3d:74:24:40:17:3d:84:92:5e:2e:b1:06:70:ac:7e:d8:d2:
62:0b:ba:a4:70:5c:c1:1c:ba:b3:d7:7d:46:ce:1a:70:e9:a8:
10:56:6d:e7:25:ff:6d:ef:a7:01:a1:b5:72:4d:34:f5:09:10:
26:21:95:05:e3:c5:ac:47:07:39:ff:84:b9:5b:65:32:f5:15:
5b:69:77:70:80:a2:a6:a8:8a:71:ee:62:49:6c:a2:9b:4d:d0:
be:ab:ef:30:d5:ea:ee:a1:b6:62:cf:56:e0:64:09:66:e2:0f:
78:d2:03:9e:67:15:70:16:b8:3f:d9:76:a0:ce:92:86:ab:f5:
32:f3:b6:e4:13:b2:d3:fe:90:ef:0b:cf:32:15:e8:5e:8f:5a:
60:57:fa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:06 2025 by rpki-client